Analysis
-
max time kernel
122s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
03/05/2024, 17:36
Behavioral task
behavioral1
Sample
110e76c5da696e57a1a4c58600e3b0dd_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
110e76c5da696e57a1a4c58600e3b0dd_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
110e76c5da696e57a1a4c58600e3b0dd_JaffaCakes118.pdf
-
Size
56KB
-
MD5
110e76c5da696e57a1a4c58600e3b0dd
-
SHA1
20ecfac734347504ad7104a29fe3b9228e86806e
-
SHA256
8b2c2fc77c3f288ab9162799ca32511342361e160d7a80ce980c44ff66c180eb
-
SHA512
5ad9e7002da4e0be22c3bc4cc477b1f8870c202f6b73ab6835dd24b2ec2ad75f5a514393153b748fb3d14d4ae88bbc96b82889864db8c1fdd7e722218ebe37b5
-
SSDEEP
768:tgGzpDyBVksi8ElF3PnpRfNQAXt3EqNmuayUDbPqOO51aS+QI2rpezxUNLCTdEfg:OGFmmDNQA3rjlcdEfOZ1lIvzT3fkZHB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1624 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1624 AcroRd32.exe 1624 AcroRd32.exe 1624 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\110e76c5da696e57a1a4c58600e3b0dd_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1624
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52bcd34eab683df572c773696d035ceec
SHA1976a84aeb02646b7474299e2915a3bda8b8ab00c
SHA256df515869f3f14abb8c0f5b5bca419667fbdc47c68337c4eeebceec79c3a836e2
SHA5129a335c3fa44fa8cab26e2a3463190139502f0088894b3a0feb8f4116aa36d2bfb0fe4a5ce9903b72fbf982ec08cf763c752c29b45ec68ab440464391d3e687ea